Security Advisory

CVE-2020-26712

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-01-12 14:17:33

Last updated 2024-08-04 15:56:04

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

REDCap 10.3.4 contains a SQL injection vulnerability in the ToDoList function via sort parameter. The application uses the addition of a string of information from the submitted user that is not validated well in the database query, resulting in an SQL injection vulnerability where an attacker can exploit and compromise all databases.

← Browse all CVEs View on cve.org ↗